Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: q0zNBexP7PRbRS+bcFYOfJ//dO6pr0f/QdfhG9Fb+WI=
Subject key identifier: BF:D9:36:8E:12:A7:98:02:F2:DB:4C:55:86:F0:02:BA:53:78:3D:F1
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 0198936CC1DC1940DE523EE6F5107BD69909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 10:00:34 +0000
Manifest this update: Sun 10 Aug 2025 10:00:34 +0000
Manifest next update: Mon 11 Aug 2025 10:00:34 +0000
Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=)
2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=)
3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: 2SoIJNU/hNjErsWxmBy+2/W2/J1Ozg3LEPy0DtUEmdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:c1:dc:19:40:de:52:3e:e6:f5:10:7b:d6:99:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Aug 10 10:00:34 2025 GMT
Not After : Aug 11 10:00:34 2025 GMT
Subject: CN=bfd9368e12a79802f2db4c5586f002ba53783df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:21:4a:b9:00:0b:0f:69:0b:22:0b:64:a8:
b9:70:4b:74:92:42:2e:67:7f:b2:e9:13:d9:5c:fa:
b6:bf:86:35:fe:81:d3:a4:b7:2f:61:46:30:ee:fe:
29:f3:2e:fc:22:41:a1:f5:d5:ab:cb:c5:61:fa:f3:
e5:e4:11:5d:cc:1d:c2:06:52:68:04:9b:20:19:cc:
85:9b:bd:cd:b2:b4:86:12:05:cf:12:b4:51:e1:71:
14:a4:dd:b7:96:c5:dc:b3:4b:b3:d8:bf:a9:81:b5:
e8:3f:c3:e8:62:20:5f:0d:99:2a:a7:d9:78:d3:36:
36:29:c2:e8:c1:65:0e:88:af:3e:1d:e8:58:97:8f:
2c:05:b2:5d:b5:3a:f3:0f:3f:1d:a7:60:fd:de:ff:
c5:6a:ee:ff:1e:ee:9e:32:85:58:e2:58:90:4d:cd:
d1:c6:f8:06:63:99:2c:92:58:33:4d:2c:8f:a2:c7:
0b:bd:d1:1b:c6:a7:e7:00:ad:be:d9:2d:39:39:92:
09:48:bd:58:43:28:42:33:32:1a:37:04:31:0d:98:
d9:a8:d1:af:85:33:ec:81:78:48:b3:d0:f0:ed:cb:
79:30:59:59:79:22:18:fd:a7:1a:2a:f0:d5:ef:29:
fc:96:ce:1f:49:a1:b6:ff:4f:ab:22:b6:ff:e6:8a:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:36:8E:12:A7:98:02:F2:DB:4C:55:86:F0:02:BA:53:78:3D:F1
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1f:1e:02:00:47:d6:1c:09:97:cb:7f:21:12:9d:b3:be:b1:
bf:1e:34:9a:fc:d6:6a:46:bb:7b:d3:af:62:a5:ee:24:48:83:
29:a4:7f:46:04:0b:6f:6d:bb:77:50:11:9b:8a:60:0b:db:cb:
97:55:f0:a6:9f:f8:ea:4d:81:aa:1d:b5:30:32:d9:fc:7a:28:
2a:c0:cd:60:d5:91:5a:65:d3:bf:eb:12:0f:50:a2:2d:bd:c0:
8c:a3:81:01:b5:7d:67:bc:4e:2d:64:8c:7a:32:d0:1b:ed:1c:
74:34:c1:04:e1:f4:d3:bd:42:9c:27:1e:70:a8:d3:f1:5b:95:
77:2f:a5:2b:50:a1:4f:de:64:d7:2b:a5:e8:b6:d6:9b:46:2e:
b0:b4:88:ed:13:a0:da:e2:75:c0:bf:28:05:31:3c:b9:60:9d:
dd:c0:43:7d:82:40:44:86:75:8d:96:fb:fb:35:4f:89:3a:74:
fb:f0:38:25:7e:52:ca:0b:5e:9d:61:9a:95:af:2d:0c:28:5b:
c2:ee:35:10:4f:85:f1:6f:c9:1e:22:98:72:c9:b1:2f:e3:48:
36:da:78:5e:46:06:f5:50:84:27:4b:4a:50:65:e7:73:75:8d:
de:0f:2e:5c:9c:c3:06:86:bd:72:cb:b2:4c:12:b5:a0:ba:13:
26:80:c8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:00 2025 by rpki-client